Lucene search

K
cve[email protected]CVE-2011-4220
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4220

2022-10-0316:15:13
CWE-264
web.nvd.nist.gov
30
cve-2011-4220
investintech
slimpdf reader
remote code execution
denial of service
application crash
pdf document

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.0%

Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.

Affected configurations

NVD
Node
investintechslimpdf_readerMatch-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.0%